Weekly exposure briefings
What the desk saw this week: breach disclosures, credential exposures, and identity threats affecting North American practices, written in plain language. 7 briefings published to date.
Six major data breaches spanning North America dominated Q2–Q3 2026, exposing over 100 million records across healthcare, insurance, identity verification, and payment platforms. Social engineering and third-party compromise remain the primary attack vectors.
Healthcare and education remain primary targets in North America, with ransomware and supply-chain compromises driving major incidents. Six verified breaches in the last 90–150 days exposed over 11 million records across healthcare, fintech, and education sectors.
Six major data breaches spanning May–June 2026 have exposed over 350 million North American records, driven by education ransomware, healthcare business-associate failure, and government infrastructure compromise. Supply-chain vulnerabilities and credential extortion remain the dominant attack vectors.
Six major breaches affecting North Americans between November 2025 and September 2026 exposed over 130 million records across healthcare, education, technology, and financial services. Record counts grew significantly during investigation phases, with third-party vendor compromises emerging as the dominant attack vector.
North American organizations faced significant data exposures in the first half of 2026, with credential theft and phishing attacks driving major breaches in financial services, healthcare, and education. Five major incidents affected millions across the US and Canada.
Six major data breaches impacted North America in 2026, ranging from 1.8M to 15M records. Healthcare and education sectors bore the heaviest impact, with supply chain compromises and social engineering remaining the primary attack vectors.
Six major breaches affecting North Americans in 2026 span healthcare, education, finance, and insurance sectors. Notable incidents include the largest healthcare breach (Conduent at 62.2M records), record education sector breach (Instructure Canvas affecting 41% of North American higher education), and a major Canadian bank breach (CIBC at 1.2M).